American Bar Association

The American Bar Association (ABA) notified the California Attorney General of a data breach where an unauthorized third party gained access to its network starting on or about March 6, 2023. The ABA detected unusual activity on March 17, 2023. The incident involved the acquisition of usernames and salted/hashed passwords for online accounts on the old ABA website (pre-2018) and the ABA Career Center (since 2018). No plain-text passwords were exposed. The ABA activated its incident response plan, retained cybersecurity experts, removed the attacker, and reviewed network security configurations.